$ rpki-client -vvf rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/aw5C2IWeCxzeVBV6y412BK0_8bM.mft File: aw5C2IWeCxzeVBV6y412BK0_8bM.mft (raw, json) Hash identifier: t7eWDQWToEGhJF6sLFQUy8H2b+7QjgZwvVUpGFh2NFM= Subject key identifier: FB:63:AA:39:B8:E0:F9:D1:46:1E:11:75:8E:4E:03:D2:AE:74:59:D1 Authority key identifier: 6B:0E:42:D8:85:9E:0B:1C:DE:54:15:7A:CB:8D:76:04:AD:3F:F1:B3 Certificate issuer: /CN=A9153457/serialNumber=6B0E42D8859E0B1CDE54157ACB8D7604AD3FF1B3 Certificate serial: 358F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aw5C2IWeCxzeVBV6y412BK0_8bM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/aw5C2IWeCxzeVBV6y412BK0_8bM.mft Manifest number: 3529 Signing time: Wed 02 Jul 2025 14:21:31 +0000 Manifest this update: Wed 02 Jul 2025 14:21:30 +0000 Manifest next update: Wed 09 Jul 2025 14:21:30 +0000 Files and hashes: 1: aw5C2IWeCxzeVBV6y412BK0_8bM.crl (hash: mzqu3YLPMD8ak7bTXrNilWLqP3d/6U+DcQ9LM4OmIyY=) 2: 4265BD864D5811EF98470D6DC4F9AE02.roa (hash: LyyjHvE4fRPM9/6TndqGFc9qDsilKdVa0sJ2tFWa+O0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/aw5C2IWeCxzeVBV6y412BK0_8bM.crl rsync://rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/aw5C2IWeCxzeVBV6y412BK0_8bM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aw5C2IWeCxzeVBV6y412BK0_8bM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13711 (0x358f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153457, serialNumber=6B0E42D8859E0B1CDE54157ACB8D7604AD3FF1B3 Validity Not Before: Jul 2 14:21:30 2025 GMT Not After : Jul 9 14:21:30 2025 GMT Subject: CN=6865406a-7fee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b4:0d:27:df:32:30:07:e9:12:9b:01:51:a7: 7c:f4:d7:1c:60:bf:20:f8:d5:9c:63:5c:33:c3:54: 30:53:2f:81:0e:1d:23:70:dd:87:51:f2:95:a0:34: ad:ed:48:91:40:7b:1a:90:0a:3d:68:33:88:99:48: a1:31:f1:c9:c2:6f:9f:3c:90:91:bc:e7:a2:ba:e7: 56:2d:35:ab:34:a9:c0:55:f3:8c:f8:9f:52:ff:46: dc:da:1c:22:3d:a0:26:c1:5d:41:ec:99:89:4c:38: dc:b7:21:69:1f:75:fb:3d:52:90:ab:18:f0:70:ac: 61:8a:03:94:11:3c:4b:71:1c:8e:d5:31:9f:a1:e5: 63:5b:85:4d:f5:02:aa:c3:0b:9e:46:55:0e:00:53: ab:9e:52:8a:c7:53:12:21:04:cf:93:fb:55:25:d2: 49:4f:25:32:da:3c:a4:52:61:d3:12:c1:4e:eb:fe: bc:3b:eb:c7:62:78:6f:91:ad:6f:79:df:af:80:28: b8:48:8f:6b:c3:a6:cb:39:39:c2:3f:ac:79:d1:63: da:eb:12:2b:38:b9:3a:f2:7a:42:aa:37:15:2c:8a: 84:65:44:1a:d4:e7:40:61:a8:93:41:f7:57:36:da: 9b:50:dc:27:71:49:47:89:06:82:69:41:6a:21:8d: e4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:63:AA:39:B8:E0:F9:D1:46:1E:11:75:8E:4E:03:D2:AE:74:59:D1 X509v3 Authority Key Identifier: keyid:6B:0E:42:D8:85:9E:0B:1C:DE:54:15:7A:CB:8D:76:04:AD:3F:F1:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/aw5C2IWeCxzeVBV6y412BK0_8bM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aw5C2IWeCxzeVBV6y412BK0_8bM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/aw5C2IWeCxzeVBV6y412BK0_8bM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:04:b2:fe:d4:ea:02:a6:ae:3d:5a:42:53:f4:40:ec:ba:8c: ee:3b:8c:1d:20:9b:f7:8d:f2:5b:00:32:75:7a:4d:b7:65:5d: 74:79:e7:1e:c3:84:01:e1:14:7f:a8:92:4f:9d:c5:66:7a:8a: 76:5a:aa:df:8a:c2:0f:a3:49:eb:d9:bf:69:eb:f4:86:f7:ea: 8b:14:56:f3:2c:2c:27:b3:3c:1e:cf:5b:58:da:f5:36:3f:77: cb:3a:9e:13:4a:d2:75:08:86:d6:1a:13:7c:13:af:41:43:73: 28:be:c4:d0:71:54:25:47:49:36:33:e3:1b:58:74:ed:0b:09: c5:26:ce:42:ca:f9:62:28:92:67:a5:82:e8:f4:a8:6c:d7:ee: a6:1c:cf:2c:46:25:3f:7a:05:76:62:61:e6:5d:32:50:e3:34: 10:d5:11:79:08:8d:20:74:ee:2e:4a:d5:9e:64:f0:34:25:6d: ad:e2:bb:91:d0:0e:a9:af:b3:5d:68:7c:46:dc:91:0e:03:b1: aa:6c:53:d1:b9:2b:18:85:e1:47:e0:81:52:7d:09:f3:ee:26: b1:6e:45:0a:19:41:ec:38:5a:ac:49:2f:44:ce:6b:21:0c:5c: 56:cb:2d:d8:83:39:36:66:a1:a6:d2:c2:2b:f5:a7:c8:7b:71: af:5f:5c:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM0NTcxMTAvBgNVBAUTKDZCMEU0MkQ4ODU5RTBCMUNERTU0MTU3QUNCOEQ3NjA0 QUQzRkYxQjMwHhcNMjUwNzAyMTQyMTMwWhcNMjUwNzA5MTQyMTMwWjAYMRYwFAYD VQQDEw02ODY1NDA2YS03ZmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbQNJ98yMAfpEpsBUad89NccYL8g+NWcY1wzw1QwUy+BDh0jcN2HUfKVoDSt 7UiRQHsakAo9aDOImUihMfHJwm+fPJCRvOeiuudWLTWrNKnAVfOM+J9S/0bc2hwi PaAmwV1B7JmJTDjctyFpH3X7PVKQqxjwcKxhigOUETxLcRyO1TGfoeVjW4VN9QKq wwueRlUOAFOrnlKKx1MSIQTPk/tVJdJJTyUy2jykUmHTEsFO6/68O+vHYnhvka1v ed+vgCi4SI9rw6bLOTnCP6x50WPa6xIrOLk68npCqjcVLIqEZUQa1OdAYaiTQfdX NtqbUNwncUlHiQaCaUFqIY3krwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPtjqjm4 4PnRRh4RdY5OA9KudFnRMB8GA1UdIwQYMBaAFGsOQtiFngsc3lQVesuNdgStP/Gz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzQ1Ny80QzFBMDM0QzFE N0IxMUUyQkUzREE2QzgwOEIwMkNEMi9hdzVDMklXZUN4emVWQlY2eTQxMkJLMF84 Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F3NUMySVdlQ3h6ZVZCVjZ5NDEyQkswXzhiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzQ1Ny80QzFBMDM0QzFEN0IxMUUyQkUzREE2QzgwOEIwMkNEMi9hdzVDMklXZUN4 emVWQlY2eTQxMkJLMF84Yk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0BLL+1OoCpq49WkJT9EDsuozuO4wdIJv3jfJbADJ1ek23ZV10eece w4QB4RR/qJJPncVmeop2WqrfisIPo0nr2b9p6/SG9+qLFFbzLCwnszwez1tY2vU2 P3fLOp4TStJ1CIbWGhN8E69BQ3MovsTQcVQlR0k2M+MbWHTtCwnFJs5CyvliKJJn pYLo9Khs1+6mHM8sRiU/egV2YmHmXTJQ4zQQ1RF5CI0gdO4uStWeZPA0JW2t4ruR 0A6pr7NdaHxG3JEOA7GqbFPRuSsYheFH4IFSfQnz7iaxbkUKGUHsOFqsSS9Ezmsh DFxWyy3Ygzk2ZqGm0sIr9afIe3GvX1xM -----END CERTIFICATE-----Generated at Thu Jul 3 05:38:33 2025 by rpki-client